$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/530f9b78-8ec1-3b6c-9ebd-9a4e4bacab0a.roa File: 530f9b78-8ec1-3b6c-9ebd-9a4e4bacab0a.roa (raw, json) Hash identifier: EsNvvJQYGR/AgoQH+vsPH0BkXW5pqaVauu5LDqjp/Gw= Subject key identifier: DE:02:BD:6E:62:32:24:09:5B:03:BA:0D:5E:3F:C1:B7:69:AA:4F:BF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D2D3F68B2FF77C4837925D1C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/530f9b78-8ec1-3b6c-9ebd-9a4e4bacab0a.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 15461 IP address blocks: 2001:470:542::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:68:b2:ff:77:c4:83:79:25:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=3d0b8cea-6c90-4e69-9819-9bddd0ea7313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:da:1e:a4:3a:03:e1:7e:55:48:7a:f9:e1: 7d:cb:52:95:cf:a0:a1:3a:18:ef:dd:08:86:02:24: ca:92:02:2b:d7:b9:da:95:6c:4e:6d:f9:18:4e:eb: 2a:b1:a4:a2:cb:cf:00:f7:e0:f9:4c:37:54:94:af: 1f:bd:ef:aa:04:09:21:f8:bb:c3:6e:9f:d4:0a:df: e1:71:95:a4:44:b1:90:47:e7:16:b6:7d:e7:b5:84: 02:e5:f2:dc:23:6e:bd:8c:43:4a:36:e0:34:9f:93: 97:ca:1f:68:bb:fa:93:34:de:56:12:b3:89:a3:05: 23:79:52:a3:33:6f:85:6c:87:5d:c6:cf:8e:f1:51: 69:7c:c3:8c:34:36:ff:6a:54:ac:f0:c4:5b:81:66: f2:07:ee:51:6e:28:d1:c1:a9:91:e4:cb:44:6b:80: 8b:b9:12:0c:09:db:7c:b0:cf:8a:09:9e:2b:b1:75: da:b6:9f:d7:cd:b5:92:85:67:d0:dc:f0:c8:03:1b: 5b:e2:a1:b9:27:20:13:e2:ef:ab:07:f8:c7:29:ac: 70:02:19:fa:a2:18:58:22:4c:fa:3f:b9:7f:81:c2: 20:4c:a2:b7:08:70:c4:e1:5b:5e:77:b2:25:0e:62: e7:98:d4:36:f1:69:1f:6f:f4:d8:d1:b9:91:f1:c4: 8d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:02:BD:6E:62:32:24:09:5B:03:BA:0D:5E:3F:C1:B7:69:AA:4F:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/530f9b78-8ec1-3b6c-9ebd-9a4e4bacab0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:542::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:74:a9:e0:1b:78:42:9a:ec:e4:e8:04:60:ab:4f:bf:97:58: e0:db:89:26:35:6c:95:a4:4e:83:07:a8:3a:51:ec:3d:24:32: eb:3a:9b:c5:9e:99:83:56:de:c1:f2:9b:68:4f:0d:75:b2:b0: 26:ff:59:27:fa:a3:34:a5:7f:19:fa:2b:1e:8f:da:51:47:55: 63:50:5e:cf:72:7a:df:de:49:6f:fa:7c:c2:ce:42:2a:35:9e: 91:b1:c6:f8:51:b5:a1:b3:7a:eb:9b:7f:c7:21:f1:8d:a0:c3: 47:0a:59:5a:e3:5a:ac:45:1e:34:d9:17:de:8b:41:b2:34:3f: f5:9f:ac:5c:4d:0b:52:98:80:48:a9:de:db:2a:7f:a3:38:41: 6a:fd:31:df:f1:fe:f8:98:4d:8c:a0:2b:81:51:c5:d0:62:3b: fb:7c:57:0e:a5:aa:d0:a6:c9:51:a8:57:58:95:2e:fb:96:7c: 62:d0:3e:53:d1:77:a2:0f:1e:08:44:22:7b:ee:4b:d7:4e:d5: 64:3e:b1:89:01:ca:cc:c1:fc:f6:d0:da:fd:aa:51:a8:6e:3a: 47:0e:6b:43:38:0f:12:ea:b5:df:a3:14:3c:d7:68:04:79:f5: 0d:9f:72:6a:10:65:e5:67:1c:d4:37:19:bf:a9:f1:86:cd:f1: d2:82:42:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0tP2iy/3fEg3kl0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk M2QwYjhjZWEtNmM5MC00ZTY5LTk4MTktOWJkZGQwZWE3MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBLaHqQ6A+F+VUh6+eF9y1KVz6ChOhjv3QiG AiTKkgIr17nalWxObfkYTusqsaSiy88A9+D5TDdUlK8fve+qBAkh+LvDbp/UCt/h cZWkRLGQR+cWtn3ntYQC5fLcI269jENKNuA0n5OXyh9ou/qTNN5WErOJowUjeVKj M2+FbIddxs+O8VFpfMOMNDb/alSs8MRbgWbyB+5RbijRwamR5MtEa4CLuRIMCdt8 sM+KCZ4rsXXatp/XzbWShWfQ3PDIAxtb4qG5JyAT4u+rB/jHKaxwAhn6ohhYIkz6 P7l/gcIgTKK3CHDE4Vted7IlDmLnmNQ28Wkfb/TY0bmR8cSNRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4CvW5iMiQJWwO6DV4/wbdpqk+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTMwZjliNzgtOGVjMS0z YjZjLTllYmQtOWE0ZTRiYWNhYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB10qeAbeEKa7OToBGCrT7+XWODbiSY1bJWkToMHqDpR7D0kMus6 m8WemYNW3sHym2hPDXWysCb/WSf6ozSlfxn6Kx6P2lFHVWNQXs9yet/eSW/6fMLO Qio1npGxxvhRtaGzeuubf8ch8Y2gw0cKWVrjWqxFHjTZF96LQbI0P/WfrFxNC1KY gEip3tsqf6M4QWr9Md/x/viYTYygK4FRxdBiO/t8Vw6lqtCmyVGoV1iVLvuWfGLQ PlPRd6IPHghEInvuS9dO1WQ+sYkByszB/PbQ2v2qUahuOkcOa0M4DxLqtd+jFDzX aAR59Q2fcmoQZeVnHNQ3Gb+p8YbN8dKCQo8= -----END CERTIFICATE-----Generated at Thu Mar 26 01:29:42 2026 by rpki-client